nicholasjackson / cnitchLinks
Container Snitch checks running processes under the Docker Engine and alerts if any are found to be running as root
☆78Updated 7 years ago
Alternatives and similar repositories for cnitch
Users that are interested in cnitch are comparing it to the libraries listed below
Sorting:
- ☆55Updated 7 years ago
- The Container Security Book—a free book for practitioners☆83Updated 5 years ago
- ☆33Updated 6 years ago
- Docker authentication plugin to enforce a image pull policy. Whitelist Docker images allowed to be pulled.☆42Updated 7 years ago
- Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect☆23Updated last month
- Kubernetes security scanner based on the open-source container vulnerability scanner Trivy.☆23Updated 4 years ago
- Web Application Firewall (WAF) on Kubernetes☆68Updated 3 years ago
- Falco container runtime security extras (default rulesets and more)☆49Updated 6 years ago
- ☆29Updated 5 months ago
- Kubernetes security and vulnerability tools and utilities.☆56Updated 4 years ago
- Bash wrapper script for Aquasec Microscanner☆61Updated 5 years ago
- A magic shim for Docker credential helpers 🪄☆69Updated 3 years ago
- Aqua Enterprise scanner as a plug-in vulnerability scanner in the Harbor registry☆37Updated 9 months ago
- Dockerfile Security Checker using OPA Rego policies with Conftest☆60Updated 3 years ago
- A proxy for docker.sock that enforces access control and isolated privileges☆143Updated 3 years ago
- A Dockerfile that creates an image with known vulnerabilities.☆49Updated 3 years ago
- Variety of kubectl krew tools usually security focused☆32Updated last year
- a tool to audit the istio service mesh☆173Updated 3 years ago
- Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env☆103Updated 5 years ago
- A @HashiCorp Vault plugin for authenticating and receiving policies via Slack.☆50Updated 5 years ago
- efficient linux security monitoring☆26Updated 7 years ago
- Because Clair needs a friend☆31Updated 6 years ago
- Kubernetes Pod RBAC Breakout☆39Updated 2 years ago
- Hardening and Auditing Tool For Docker Hosts & Containers☆68Updated 10 years ago
- Picasso is a tool that can take a template and data, and generate images from them.☆19Updated 2 years ago
- Auditing & Hardening script for Kubernetes☆45Updated 7 years ago
- Container Security Workshop covering using Falco on Kubernetes.☆106Updated 4 years ago
- ⛔️ DEPRECATED Kubernetes operator and CLI tool for encrypting and managing Kubernetes secrets☆65Updated 11 months ago
- Now you won't miss the moment the domain expires.☆28Updated 2 weeks ago
- An actuary is a business professional who analyzes the financial consequences of risk.☆79Updated 7 years ago